Банк Испании одобрил внедрение гибридной системы AI и людей для непрерывного пентеста

Bank of Spain-regulated card issuer combines human-led and agentic AI pentesting to surface business logic risk and meet regulatory traceability requirements REDWOOD CITY, Calif., Aug. 24, 2026 (GLOBE NEWSWIRE) -- Synack, the AI + human penetration testing platform for continuous security validation, today announced that a Bank of Spain-regulated Credit Financial Institution, Iberia Cards, has adopted the Synack Red Team (SRT) alongside Sara AI Pentesting to move beyond annual, fixed-scope compliance testing toward a model of continuous security validation. Through the Synack platform, customers like Iberia Cards can experience Sara AI Pentesting, powered by the Synack Autonomous Red Agent, plus the SRT, a globally vetted community of elite ethical hackers, to expand attack surface coverage, accelerate testing, and validate real-world exploitability with greater speed and confidence. As a financial institution managing payment infrastructure under strict regulatory oversight, Iberia Cards needed a testing program that could surface the business logic vulnerabilities that automated scanners routinely miss, while producing documented, reproducible evidence for regulators and executive leadership. Working with Synack, the company built a program that pairs deep, human-led SRT engagements with Sara AI Pentesting for more frequent testing and validation between those cycles. "What keeps bringing me back to Synack is the convergence of three things you rarely find together: professionalism, breadth in vulnerability discovery, and real depth in findings," said José Manuel Rivera García, Chief Information Security Officer at Iberia Cards. "The serious problems are always in the business logic. There's always time to improve the perimeter later, but if you're only testing once a year, you're not finding what matters." "Iberia Cards is a strong example of what continuous security validation looks like in one of the most highly regulated industries in the world," said Angela Heindl-Schober, Chief Marketing Officer at Synack. "It also reflects the growing footprint we're building across Spain and Portugal and within financial services more broadly. Customers in this sector can't afford to choose between speed and rigor, and pairing Sara AI Pentesting with the Synack Red Team means they no longer have to." Organizations interested in learning more about how Iberia Cards is using Synack can read the full customer story. About Iberia Cards Iberia Cards is a financial credit institution regulated by the Bank of Spain, with over 20 years of experience. A member of the IAG Group, the company is backed by Banco Santander as a shareholder, with BBVA also acting as a distributor of its credit cards. Currently serving more than 200,000 customers, Iberia Cards issues co-branded cards for both individuals and corporations, linked to the Iberia Club and On Business loyalty programs. Since 2023, it has offered a "buy now, pay later" solution tailored for businesses within the travel sector. Learn more at iberia.com/es/en/iberiacards. About Synack Synack is the AI + human penetration testing platform for continuous security validation. Sara AI Pentesting combines agentic AI with the Synack Red Team, a rigorously vetted global community of security researchers, to expand testing coverage and prove real-world exploitability. The Synack Platform gives organizations control and visibility across testing activity, validated findings and remediation status. Synack supports point-in-time and continuous penetration testing across web applications, APIs, mobile applications, cloud and host infrastructure, internal environments and AI or LLM systems. Founded by former NSA operatives, Synack has enabled nearly 10 million hours of security testing to protect critical assets across enterprise, public-sector and highly regulated environments. Learn more at synack.com and on LinkedIn. Media Contact Katy Nally Senior Content Marketing Manager